2022 CVE Vulnerabilities
27,528 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23105 | MEDIUM | 6.5 | 0.4% | Jan 12, 2022 | Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controlle... |
| CVE-2022-20621 | MEDIUM | 5.5 | 0.3% | Jan 12, 2022 | Jenkins Metrics Plugin 4.0.2.8 and earlier stores an access key unencrypted in its global configuration file on the Jenk... |
| CVE-2022-20620 | MEDIUM | 4.3 | 0.7% | Jan 12, 2022 | Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enum... |
| CVE-2022-20618 | MEDIUM | 4.3 | 0.9% | Jan 12, 2022 | A missing permission check in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers with... |
| CVE-2022-20616 | MEDIUM | 4.3 | 0.9% | Jan 12, 2022 | Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form va... |
| CVE-2022-20615 | MEDIUM | 5.4 | 81.8% | Jan 12, 2022 | Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label de... |
| CVE-2022-20614 | MEDIUM | 4.3 | 1.1% | Jan 12, 2022 | A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read ... |
| CVE-2022-20613 | MEDIUM | 4.3 | 1.0% | Jan 12, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attac... |
| CVE-2022-20612 | MEDIUM | 4.3 | 1.8% | Jan 12, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers... |
| CVE-2022-0013 | MEDIUM | 5.5 | 0.2% | Jan 12, 2022 | A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacke... |
| CVE-2022-0179 | MEDIUM | 5.4 | 0.6% | Jan 12, 2022 | snipe-it is vulnerable to Missing Authorization |
| CVE-2022-0159 | MEDIUM | 5.4 | 0.6% | Jan 12, 2022 | orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2022-0087 | MEDIUM | 6.1 | 2.6% | Jan 12, 2022 | keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2022-21970 | MEDIUM | 6.1 | 2.5% | Jan 11, 2022 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2022-21964 | MEDIUM | 5.5 | 1.0% | Jan 11, 2022 | Remote Desktop Licensing Diagnoser Information Disclosure Vulnerability |
| CVE-2022-21963 | MEDIUM | 6.8 | 0.7% | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2022-21962 | MEDIUM | 6.8 | 0.7% | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2022-21961 | MEDIUM | 6.8 | 0.7% | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2022-21960 | MEDIUM | 6.8 | 0.7% | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2022-21959 | MEDIUM | 6.8 | 0.7% | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2022-21958 | MEDIUM | 6.8 | 0.7% | Jan 11, 2022 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
| CVE-2022-21954 | MEDIUM | 6.1 | 1.5% | Jan 11, 2022 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
| CVE-2022-21932 | MEDIUM | 5.4 | 1.1% | Jan 11, 2022 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability |
| CVE-2022-21931 | MEDIUM | 4.2 | 1.2% | Jan 11, 2022 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2022-21930 | MEDIUM | 4.2 | 1.2% | Jan 11, 2022 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now